WillItSurvive
Cybersecurity companies · subsidiary of Thoma Bravo · United States

Exabeam

Exabeam sells SIEM and behavior analytics software that security teams use to spot threats in log data.

Losing its protection
Assessed 21 July 2026 · Evidence as of 21 July 2026
The structural protection is eroding.
On the recordSince 21 July 2026 · Checkable from October 2026 · Every call on the record Checkpoint: Next Gartner Magic Quadrant for SIEM, watching whether Exabeam slips further behind Microsoft
The call

Exabeam still holds a real customer base and Gartner Leader status, but headcount is shrinking, revenue figures are murky, and Microsoft is closing in from the top of the market.

Exabeam sells software that watches computer networks for security threats and helps companies follow rules. It has real advantages: thousands of customers use it, it works with older systems, and switching away is painful because it stores a lot of company-specific setup. However, Microsoft is attacking hard with a product called Sentinel that does similar work and comes free or cheap as part of packages companies already buy, and it is officially ranked as a leader by the industry's main scorekeeper. At the same time, Exabeam itself is building new AI tools that might make its old products less valuable. The company has also cut its staff in half since 2023, which signals shrinkage. What matters most: whether Microsoft keeps gaining customers from Exabeam, and whether the company's owner, Thoma Bravo, tries to sell it to someone else.

Why
01
AI pressure: Exabeam's own Nova agents plus agentic SOC startups like Exaforce. Nova automates the Tier-1/2 analyst work customers used to pay Exabeam seats for, and new agentic SOC tools argue SIEM itself is outdated. Could AI do the core job? Only partly.
02
Bigger players: Microsoft Sentinel. Sentinel ships as a near-free add-on inside Defender and E5, and Gartner now ranks it rising fastest in execution, past Exabeam. Could a giant copy it? Yes, easily.
03
What protects it. 290+ prebuilt parsers, compliance workflows, and hybrid/on-prem deployment options tied to a 3,000+ customer base that is costly to rip out.
What would change this call
Exabeam's ranking in the October 2026 Gartner SIEM Magic Quadrant versus Microsoft Sentinel. Shows whether Exabeam is losing ground to Sentinel in execution and vision.
Further headcount cuts or stabilization at Exabeam through 2026. Indicates whether the business is shrinking further or finding footing.
Any announcement of a Thoma Bravo sale or IPO filing for Exabeam. Would show whether the PE owner is exiting via acquisition rather than growth.
Key numbers
  • Headcount fell 43.8%, from 1,406 to 827 (Dec 2025)
  • Job postings dropped 46.6% year over year (2025)
  • Revenue estimates range from $52M to $222M (2026-07-20)
Named risks
  • Revenue is unverified and estimates range from $25M to $222M, undermining credibility of growth narrative. Severity: high
  • Headcount down 43.8% since 2023 with job postings falling 46.6% in 2025, signaling contraction not growth. Severity: high
  • Microsoft Sentinel's near-zero-cost bundling into E5/Defender directly undercuts Exabeam's core pricing model. Severity: high
  • Nova and rival agentic AI tools automate the Tier-1/2 analyst workflows Exabeam's business is built on. Severity: medium
  • Thoma Bravo's PE ownership structure typically pursues strategic sale over long-term equity growth for employees. Severity: medium
Rivals, as read in July 2026
RivalDirectionEvidence
Microsoft Sentinellosing toSentinel named Gartner SIEM Leader Oct 16, 2025, rising fastest in execution, bundled into E5 at near-zero cost
Splunk (Cisco)contestingCited alongside Microsoft and IBM as dominating the SIEM Gartner Magic Quadrant as of July 2026
IBM QRadarcontestingQRadar SaaS assets reportedly acquired by Palo Alto Networks, reshaping SIEM competitive field, 2026
Exaforcelosing toAgentic SOC-native entrant positioning itself as a category replacement for SIEM as of June 2026
Google ChroniclecontestingNamed as encroaching hyperscaler platform in SIEM/SecOps space, 2026 competitor listings
Questions people ask
Is Exabeam profitable in 2026?
No audited financials are public. Third-party revenue estimates range wildly from about $25M to $222M as of mid-2026 (Latka $96.5M, ZoomInfo $176.7M, StartupHub $102.9M), making profitability unverifiable from public data as of July 2026.
Who owns Exabeam now?
Private equity firm Thoma Bravo has majority-owned Exabeam since its July 17, 2024 merger with LogRhythm (which Thoma Bravo had acquired in 2018). No IPO or sale has been confirmed as of July 2026.
Has Exabeam had layoffs?
Yes. Exabeam cut about 20% of staff (134 positions) in October 2023, then saw further merger-related cuts in July 2024 including a WARN notice for 43 San Mateo workers. Headcount fell from 1,406 in 2023 to 827 by December 2025, a 43.8% decline.
Could Microsoft Sentinel replace Exabeam?
Microsoft Sentinel was named a Gartner SIEM Leader on October 16, 2025 and is reportedly rising fastest in execution ranking while bundling SOC/AI into the Defender plus E5 stack at near-zero incremental cost, directly pressuring Exabeam's core seat-based analyst business.
What is Exabeam's biggest competitor?
Microsoft Sentinel is Exabeam's most cited threat, named a Gartner SIEM Leader on October 16, 2025 and rising in execution ranking; other rivals include Splunk (now Cisco-owned), Google Chronicle, IBM QRadar, Securonix, and agentic-native entrant Exaforce.
Will Exabeam go public?
No confirmed IPO timeline exists as of July 2026. Market commentary (May 27, 2026) says Thoma Bravo could pursue either an IPO or a strategic sale as an exit, with the last disclosed standalone valuation at $2.4B in June 2021.
Timeline
  • 2025-10-08Pete Harteveld becomes CEO, succeeding retiring Chris O'Malley
  • 2025-10Exabeam adds Nova Advisor Agent for CISO peer benchmarking
  • 2025-07Nova expands to six specialized agents covering full TDIR lifecycle
  • 2025-04-01Exabeam launches Nova, multi-agent agentic AI for security operations
  • 2024-09-15WARN notice filed for 43 laid-off workers in San Mateo, CA
  • 2024-07-17Exabeam and LogRhythm complete merger under Thoma Bravo ownership
  • 2023-10Exabeam lays off about 20% of staff (134 positions)
  • 2021-06-01Exabeam raises $200M Series F at $2.4B valuation
Revision history
21 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources